Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-42695 | medium | 6.5 | No | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FolioVision FV Flowplayer Video Player... | 2026-10-11 |
| CVE-2026-105870 | high | 7.1 | No | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Delight Star Inc. WP Associate Post R2... | 2026-10-11 |
| CVE-2026-82049 | not reported | — | No | In CPython 3.13 and earlier, the tarfile module's data and tar extraction filters are vulnerable to crafted archives containing a hard link... | 2026-10-11 |
| CVE-2026-84272 | critical | 9.8 | No | IBM Guardium Data Protection 12.1 and 12.2.2 are vulnerable to missing authentication in the edge-controller component. An unauthenticated r... | 2026-10-10 |
| CVE-2026-78401 | critical | 9.8 | No | IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote unauthenticated att... | 2026-10-10 |
| CVE-2026-19494 | medium | 6.5 | No | IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attac... | 2026-10-10 |
| CVE-2026-19491 | high | 7.5 | No | IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote attacker to bypass... | 2026-10-10 |
| CVE-2026-16916 | high | 8.8 | No | IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote authenticated attac... | 2026-10-10 |
| CVE-2026-11888 | high | 7.5 | No | IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 is vulnerable to an information disclosu... | 2026-10-10 |
| CVE-2026-94510 | critical | 9.9 | No | Authorization bypass through user-controlled key in Microsoft Bookings allows an unauthorized attacker to elevate privileges over a network. | 2026-10-10 |
| CVE-2026-84250 | high | 7.8 | No | IBM Guardium Data Protection 12.2 is vulnerable due to weak cryptographic protection and a hard-coded recovery key in the pkcrypto passkey c... | 2026-10-10 |
| CVE-2026-84245 | high | 7.8 | No | IBM Guardium Data Protection 12.2 is vulnerable to a local privilege escalation in the cp_wrapper component. A low-privileged local user cou... | 2026-10-10 |
| CVE-2026-84278 | high | 7.2 | No | IBM Guardium Data Protection 12.2 is affected by a command injection vulnerability in the SUID-root ssh_config_wrapper component. An authent... | 2026-10-10 |
| CVE-2026-79842 | critical | 9.1 | No | An authentication bypass vulnerability exists in HPE Intelligent Management Center (iMC) prior to v7.3 E0713 | 2026-10-10 |
| CVE-2026-82344 | critical | 9.8 | No | IBM Guardium Data Protection 12.0, 12.1 is vulnerable to a heap-based buffer overflow in the S-TAP TrafficTap TDS login reassembly functiona... | 2026-10-10 |
| CVE-2026-82335 | critical | 9.8 | No | IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based buffer overflow in the MongoDB protocol parser. A remote attacke... | 2026-10-10 |
| CVE-2026-82334 | critical | 9.1 | No | IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based out-of-bounds read in the TDS7 LOGIN7 protocol parser. A remote... | 2026-10-10 |
| CVE-2026-78406 | critical | 9.8 | No | IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote unauthenticated att... | 2026-10-10 |
| CVE-2026-77900 | critical | 9.8 | No | Missing authentication for critical function in Azure App Service allows an unauthorized attacker to execute code over a network. | 2026-10-10 |
| CVE-2026-62128 | medium | 5.3 | No | Missing Authorization vulnerability in Creator LMS Creator LMS creatorlms allows Exploiting Incorrectly Configured Access Control Security L... | 2026-10-10 |